1. Who operates Holy Journey

Holy Journey is operated by [PLACEHOLDER — DRAFT: Final legal entity name to be supplied by Kevin and Nasrin] (“Holy Journey,” “we,” “us,” or “our”). This website and its formation resources are intended for use by adults and are not directed to children under the age of 18.

2. How to contact us

If you have questions about this policy or your personal information, you can reach us at [PLACEHOLDER: contact email — e.g., hello@holyrenewal.com] or by mail at [PLACEHOLDER: mailing address].

3. Information we collect

• Account information: First name, last name, email address, and a password you choose for your account.
• Optional telephone number: Requested from parish leaders and staff, not required from ordinary participants.
• Parish information: Parish name, parish access code, city, state, diocese, and your role within the parish.
• Parish inquiry and application information: Details you submit through a parish conversation request, partnership inquiry, or Founding Parish application.
• Formation progress and journal entries: Toolkit progress, daily reflection journal entries, course progress, and related account information stored in your account on our hosted database.
• Purchase and fulfillment information: Records of purchases made through the website or by invoice, including your name, shipping address, email, order contents and payment status. Payment card details are collected and processed by our payment processor; we do not store full card numbers.
• Technical and analytics information: Cookies, device type, browser type, pages visited, and similar analytics data used to understand how the website is used.

4. Why we collect information

• To create and manage your account
• To validate parish access codes and associate you with your parish
• To deliver formation resources, courses, and digital downloads
• To respond to parish inquiries and partnership applications
• To provide customer support
• To fulfill product orders when applicable
• For security and fraud prevention
• For optional marketing and follow-up, only with your separate consent

5. Service providers we use

Holy Journey does not sell personal information. Information may be processed by trusted service providers when necessary to operate the website, provide requested resources, manage accounts, communicate with users, and support parish partnerships. These may include:

• Customer relationship management (CRM): A CRM platform is connected to manage contacts, parish leads, applications, and communications.
• Hosting and database: Cloud-based hosting for the website, database, and account data.
• Authentication: A provider that securely stores passwords and manages sign-in sessions.
• Analytics: Privacy-conscious analytics to understand website usage.
• Email: A provider for transactional and, with your consent, marketing communications.
• Payments: A payment processor (Stripe) processes card and bank payments for orders and invoices.
• Printing and shipping: A print-on-demand partner (BookVault) receives the name, shipping address and order details needed to print and ship your books. Shipping carriers receive the delivery details needed to deliver packages.

6. Where journal and toolkit information is stored

When you create an account, your formation toolkit progress, journal entries, and course progress are stored in your account on our hosted database, associated with your user ID. Your password and authentication credentials are handled by our authentication provider and are not accessible to Holy Journey staff in plaintext.

7. Marketing email and SMS consent

We will only send marketing or follow-up communications beyond transactional messages (such as account confirmations or parish-related responses) when you provide separate, optional consent. You may withdraw consent at any time by following the unsubscribe instructions in any marketing email or by contacting us.

8. Data retention and deletion

We retain account and related information for as long as your account is active or as needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time (see Section 9).

9. Your rights: access, correction, export, and deletion

You may access, correct, export, or request deletion of your personal information by signing into your account or contacting us at the email listed in Section 2. We will respond to verified requests within a reasonable timeframe.

10. Cookies and analytics

The website uses cookies and similar technologies for authentication, session management, and analytics. You can control cookies through your browser settings. Disabling certain cookies may affect website functionality such as sign-in.

11. Information security

We take reasonable measures to protect personal information using secure authentication, encrypted connections, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. International and cross-border processing

Holy Journey is based in the United States. If you access the website from outside the United States, your information may be transferred to and processed in the United States. By using the website, you consent to such transfers.

13. Intended for adults

The website and its formation resources are intended for use by adults aged 18 and older and are not directed to children. We do not knowingly collect personal information from children.

14. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Material changes will be communicated through the website or by email when practicable.